Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/EXA9penEpphI1jDDqpE6NIZt0xo.roa
File: EXA9penEpphI1jDDqpE6NIZt0xo.roa (raw, json)
Hash identifier: BYREl7EYcNcQfeE4nvtMrK8DmSv7vmdaUk63JXhQ6rg=
Subject key identifier: 11:70:3D:A5:E9:C4:A6:98:48:D6:30:C3:AA:91:3A:34:86:6D:D3:1A
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 018CC9BBC6BBB74196A9FF37C500E1A0310B
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/EXA9penEpphI1jDDqpE6NIZt0xo.roa
Signing time: Tue 02 Jan 2024 10:32:55 +0000
ROA not before: Tue 02 Jan 2024 10:32:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5483
IP address blocks: 195.228.112.0/24 maxlen: 24
195.228.135.0/24 maxlen: 24
195.228.152.0/24 maxlen: 24
195.228.156.0/24 maxlen: 24
195.228.155.0/24 maxlen: 24
62.201.64.0/18 maxlen: 18
195.228.76.0/24 maxlen: 24
195.228.75.0/24 maxlen: 24
91.120.128.0/18 maxlen: 18
46.107.0.0/16 maxlen: 16
46.107.14.0/24 maxlen: 24
46.107.15.0/24 maxlen: 24
195.228.85.0/24 maxlen: 24
188.6.0.0/16 maxlen: 16
195.228.87.0/24 maxlen: 24
195.228.86.0/24 maxlen: 24
195.228.224.0/23 maxlen: 23
195.228.240.0/24 maxlen: 24
195.228.245.0/24 maxlen: 24
195.228.244.0/24 maxlen: 24
195.228.253.0/24 maxlen: 24
195.228.250.0/24 maxlen: 24
195.228.251.0/24 maxlen: 24
195.228.248.0/24 maxlen: 24
195.228.249.0/24 maxlen: 24
195.228.247.0/24 maxlen: 24
195.228.255.0/24 maxlen: 24
195.228.254.0/24 maxlen: 24
91.120.57.0/24 maxlen: 24
195.228.4.0/24 maxlen: 24
195.228.0.0/16 maxlen: 16
91.120.64.0/18 maxlen: 18
134.255.0.0/17 maxlen: 17
195.228.24.0/24 maxlen: 24
195.228.34.0/24 maxlen: 24
195.228.45.0/24 maxlen: 24
91.120.0.0/16 maxlen: 16
91.120.16.0/22 maxlen: 22
91.120.27.0/24 maxlen: 24
5.187.128.0/17 maxlen: 17
86.59.128.0/17 maxlen: 17
31.46.0.0/16 maxlen: 16
31.46.19.0/24 maxlen: 24
78.92.0.0/16 maxlen: 16
212.51.110.0/24 maxlen: 24
46.139.0.0/16 maxlen: 16
212.51.125.0/24 maxlen: 24
185.65.8.0/22 maxlen: 22
149.200.0.0/17 maxlen: 17
194.38.96.0/24 maxlen: 24
194.38.96.0/19 maxlen: 19
194.38.104.0/24 maxlen: 24
217.65.96.0/19 maxlen: 19
217.65.96.0/23 maxlen: 23
5.38.128.0/17 maxlen: 17
212.51.64.0/18 maxlen: 18
212.51.79.0/24 maxlen: 24
212.51.91.0/24 maxlen: 24
195.70.32.0/19 maxlen: 19
84.2.226.0/23 maxlen: 24
84.2.230.0/24 maxlen: 24
84.2.231.0/24 maxlen: 24
84.2.228.0/24 maxlen: 24
84.2.227.0/24 maxlen: 24
213.178.96.0/19 maxlen: 19
188.36.248.0/24 maxlen: 24
37.76.0.0/17 maxlen: 17
84.1.236.0/24 maxlen: 24
93.89.160.0/20 maxlen: 20
84.2.24.0/24 maxlen: 24
194.176.224.0/19 maxlen: 19
84.1.226.0/24 maxlen: 24
84.2.79.0/24 maxlen: 24
188.36.0.0/16 maxlen: 16
195.56.0.0/24 maxlen: 24
84.2.35.0/24 maxlen: 24
195.56.0.0/16 maxlen: 16
84.2.39.0/24 maxlen: 24
84.2.42.0/23 maxlen: 24
84.2.51.0/24 maxlen: 24
84.2.50.0/24 maxlen: 24
84.2.52.0/24 maxlen: 24
84.2.54.0/24 maxlen: 24
145.236.230.0/24 maxlen: 24
188.156.0.0/15 maxlen: 15
185.55.12.0/22 maxlen: 22
194.149.36.0/24 maxlen: 24
194.149.32.0/19 maxlen: 19
217.116.32.0/20 maxlen: 20
84.1.102.0/24 maxlen: 24
145.236.0.0/16 maxlen: 16
217.20.128.0/20 maxlen: 20
80.249.160.0/20 maxlen: 24
80.249.164.0/24 maxlen: 24
87.101.112.0/20 maxlen: 20
80.249.171.0/24 maxlen: 24
80.249.172.0/24 maxlen: 24
80.249.170.0/24 maxlen: 24
80.249.168.0/24 maxlen: 24
80.249.167.0/24 maxlen: 24
46.107.224.0/24 maxlen: 24
84.0.0.0/14 maxlen: 14
81.182.0.0/15 maxlen: 15
79.122.0.0/17 maxlen: 17
194.149.0.0/19 maxlen: 19
80.249.173.0/24 maxlen: 24
80.249.174.0/24 maxlen: 24
194.88.32.0/19 maxlen: 19
94.27.128.0/17 maxlen: 17
145.236.90.0/24 maxlen: 24
2001:4c48::/29 maxlen: 29
2a00:10d0::/32 maxlen: 32
2a02:738::/32 maxlen: 32
2001:4c48::/46 maxlen: 48
2001:4c48::/32 maxlen: 32
2001:4c48::/30 maxlen: 30
2001:4c4c::/30 maxlen: 30
2a00:1110::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 12 Feb 2024 10:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:c6:bb:b7:41:96:a9:ff:37:c5:00:e1:a0:31:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 2 10:32:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11703da5e9c4a69848d630c3aa913a34866dd31a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4f:94:3f:e7:8b:49:05:9c:d2:d1:2d:5d:41:
f4:e3:c0:35:3e:21:71:b8:9e:6b:04:f5:5e:6a:3d:
74:86:2e:0c:40:0f:07:43:72:06:21:c5:84:b7:05:
49:a0:5d:63:ea:38:c7:e1:a6:37:50:9b:e7:93:3a:
e1:96:b4:00:97:52:f7:7e:0d:f2:20:cb:56:17:f7:
5c:cd:42:9f:ec:b5:ac:73:b9:90:b8:52:f4:27:b8:
bf:7b:69:da:f2:93:97:7d:c7:5e:a3:ba:61:f2:b0:
fd:14:e8:86:6c:93:70:18:d9:03:98:42:db:f5:ce:
d4:ae:92:cf:1c:dd:76:bb:2c:71:5e:27:53:77:6f:
bd:2e:d9:56:f0:fb:e0:f7:08:57:6e:1b:34:8c:99:
23:68:8d:e2:07:51:70:ee:16:a3:63:3d:27:d9:43:
6f:6c:38:45:db:1a:0f:0a:40:49:f3:19:7f:11:f8:
e7:22:b9:b0:cb:33:5d:f0:2f:13:e5:7d:8d:fa:3c:
35:68:c4:0d:66:13:4a:66:67:fb:f3:38:0a:7c:87:
c7:8b:87:31:94:13:28:5d:aa:08:86:8d:12:df:28:
60:bc:03:ef:36:fe:07:bb:43:db:5a:8d:bb:1f:92:
6c:8f:e5:d8:dc:fe:63:ef:7b:82:d2:e1:7a:36:e2:
cb:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:70:3D:A5:E9:C4:A6:98:48:D6:30:C3:AA:91:3A:34:86:6D:D3:1A
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/EXA9penEpphI1jDDqpE6NIZt0xo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.38.128.0/17
5.187.128.0/17
31.46.0.0/16
37.76.0.0/17
46.107.0.0/16
46.139.0.0/16
62.201.64.0/18
78.92.0.0/16
79.122.0.0/17
80.249.160.0/20
81.182.0.0/15
84.0.0.0/14
86.59.128.0/17
87.101.112.0/20
91.120.0.0/16
93.89.160.0/20
94.27.128.0/17
134.255.0.0/17
145.236.0.0/16
149.200.0.0/17
185.55.12.0/22
185.65.8.0/22
188.6.0.0/16
188.36.0.0/16
188.156.0.0/15
194.38.96.0/19
194.88.32.0/19
194.149.0.0/18
194.176.224.0/19
195.56.0.0/16
195.70.32.0/19
195.228.0.0/16
212.51.64.0/18
213.178.96.0/19
217.20.128.0/20
217.65.96.0/19
217.116.32.0/20
IPv6:
2001:4c48::/29
2a00:10d0::/32
2a00:1110::/29
2a02:738::/32
Signature Algorithm: sha256WithRSAEncryption
48:eb:89:68:49:db:4b:f2:82:ec:db:5a:8b:45:cc:4d:0f:80:
0b:08:35:8a:33:d7:d2:b7:7b:5a:ea:e4:5b:14:12:41:00:90:
4d:f2:58:87:a8:97:02:85:8b:13:20:40:ee:54:13:d4:de:2f:
14:4a:d0:34:39:bb:11:a8:37:71:0b:17:81:d9:3e:8c:4c:a1:
ba:23:57:4f:9b:c0:e3:fb:28:4b:d5:06:76:b1:df:7f:87:1c:
9e:32:87:78:1a:68:a9:69:d6:8b:9d:63:ac:64:84:38:c3:dc:
81:70:ce:66:e7:d0:96:3d:f2:1b:f0:dc:2b:6b:70:2d:81:77:
ec:a0:c8:dc:fd:58:77:01:59:71:88:db:55:77:97:d9:db:86:
07:de:b3:92:39:42:01:ab:e1:51:a7:81:ca:24:32:76:47:ed:
fe:8f:f7:99:40:a5:54:8f:9a:a8:bc:6d:11:96:d6:39:96:29:
88:93:6c:f6:71:4e:99:8b:37:7a:61:9f:1b:73:45:3a:16:20:
13:51:0b:1d:52:a4:5d:bb:77:98:35:43:39:fd:8f:25:61:81:
d8:10:8f:b8:b7:26:a0:fb:c9:fc:ea:18:45:f8:b6:45:1e:11:
7e:c5:50:f7:6c:20:ef:36:6c:80:78:0b:b8:dd:1c:1b:b9:d4:
72:77:88:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:47 2024 by rpki-client on console-fra.rpki-client.org